Bangkok, Thailand
Estimated range. Confirm compensation with the employer.
We check listings for employer identity, role clarity, and application links before publishing.
Listing record updated: October 9, 2026. We archive records after 60 days without an update. This date does not confirm that the employer is still hiring.
Wondering if your experience matches this role? Upload your CV to see matched skills, a fit score, and areas to develop.
This role leads CP Axtra's Application Security program, managing the end-to-end secure SDLC from policy definition to toolchain management. The manager owns SAST, SCA, DAST, and secrets scanning platforms like Checkmarx and SonarQube, ensuring they are integrated into CI/CD pipelines. Responsibilities include threat modeling, secure design reviews, and defining security quality gates. The position requires balancing enforcement with enablement to help developers ship securely without slowing them down.
Own and evolve CP Axtra's Secure SDLC framework
Manage and optimize the AppSec toolchain (Checkmarx, SonarQube, Qualys WAS, Spectral, OWASP ZAP)
Drive CI/CD pipeline security integration across GitHub Actions, Azure DevOps, and Jenkins
Lead threat modeling and secure design reviews for high-risk applications
Consult with development teams on vulnerability remediation
Define and enforce security quality gates
Manage the SAST/SCA/DAST/IaC Security Manager
Report application security posture metrics to leadership
Evaluate emerging AppSec technologies including AI-assisted code review
Coordinate with the Offensive Security team
5+ years in application security — secure SDLC, code review, vulnerability management, or AppSec tooling management
Hands-on experience with at least 2 of: SAST, SCA, DAST, or secrets scanning tools
Strong understanding of CI/CD pipelines and how to integrate security checks
Ability to review code for security issues in at least 2 programming languages
Experience leading or mentoring a team
Excellent communication skills
Understanding of OWASP Top 10, SANS Top 25, and modern application attack patterns
Experience with container security scanning (Trivy, Prisma Cloud, Aqua) and IaC security (Checkov, tfsec)
Background in software development
Familiarity with AI/LLM security risks
CSSLP, GWEB, or CASE certification
Experience in retail or e-commerce application security
Thai language proficiency
Job listings are sourced from company websites and career pages. Learn more about how we source jobs.
Bangkok Jobs is not affiliated with the hiring companies. Please verify all job details directly with the employer before applying. We are not responsible for the accuracy of job postings or hiring decisions.